It looks like you're using an Ad Blocker.

Please white-list or disable in your ad-blocking tool.

Thank you.


Some features of ATS will be disabled while you continue to use an ad-blocker.


Help ATS via PayPal:
learn more

Infomation Regarind Sobig.f virus

page: 1

log in


posted on Aug, 22 2003 @ 09:41 PM
The Following Infomation is regarding what isp servers or a partal list that will be infected later on. Here is the infomation.

The request method uses UDP port 8998. X-Force also
recommends that this port be filtered outbound.

Computers infected with the Sobig.F worm are programmed

to automatically download an executable of unknown function

from a hard-coded list of servers at 19:00 UTC (3:00pm EDT)

X-Force is recommending wholesale outbound filtering of
the following IP addresses:

Orginal Infomation from Following site

Infomation Continuing to develop: Will post more later.



log in